Water System Security National Activities

1
Water System Security National Activities
AWWA WebCast - May 9, 2002

• Diane VanDe Hei
• Executive Director
• Association of Metropolitan Water Agencies
• AWWA Security Webcast
• May 9, 2002

2
Critical Foundations

• Protecting Americas Infrastructures
• The Report of the Presidents
• Commission on Critical Infrastructure
• Protection

3
Eight Critical Infrastructures

• Banking and Finance
• Oil and Gas
• Telecommunications
• Electric Power
• Water Supply
• Emergency Services
• Information Technology
• Transportation

4
Water Sector

• Presidential Decision Directive 63 (PDD 63) -
  May 1998
• Goals
• Assure continuity and viability of critical
  infrastructure
• Swiftly eliminate significant vulnerability to
  both physical and cyber attacks
• Identified 8 critical sectors, including the
  Water Sector
• EPA is the lead federal agency for Water Sector
• EPA named AMWA as Sector Coordinator
• Strongly encourages private sector Information
  Sharing and Analysis Center (ISAC)

5
Water Sector (cont)

• Bush Executive Order 13231
• October 16, 2001
• Expands on PDD 63
• Establishes Presidential Critical Infrastructure
  Protection Board

6
Overview of Federal Involvement

• Agencies involved
• Office of Homeland Security (OHS)
• Critical Infrastructure Assurance Office (CIAO)
• FBIs National Infrastructure Protection Center
  (NIPC)
• Federal Emergency Management Agency (FEMA)
• Environmental Protection Agency (EPA)

7
Federal Security Efforts
White House
Dept. of Commerce
FBI
EPA
Office of Homeland Security (T. Ridge)
National Security Council (C. Rice)
Critical Infrastructure Assurance Office
(J. Tritak)
National Infrastructure Protection Center
(R. Dick)
Water Protection Task Force (Janet Pawlukiewicz)
Critical Infrastructure Protection Board (Richard
Clarke)
Water Sector Coordinator (AMWA)
CIP Board Staff - NSC, OMB, and CIAO
8
CIP Advisory Group

• AMWA formed Critical Infrastructure Protection
  Advisory Group (CIPAG)
• Established January 2001
• 10 members from public/private utilities and
  state administrator offices
• Liaisons from EPA, FBI (NIPC), state
  administrators and other national drinking water
  and wastewater associations

9
CIPAG Goals

• Coordinate and integrate efforts on critical
  infrastructure protection issues
• Develop policy and project recommendations on
  water and wastewater security needs
• Assess security needs for water systems
• Coordinate with other sectors

10
Challenges

• Conduct vulnerability assessments
• Need better threat information
• Revise Emergency Response Plans
• Federal FOIA and local/state sunshine laws
• Understanding interdependencies
• Address security in new designs and upgrades

11
Water ISAC Objectives

• Disseminate early warnings of physical and cyber
  system threats
• Share security incident information between water
  utilities
• Provide trending and other analysis for security
  planning
• Distribute current proven security practices and
  suggestions

12
Water ISAC Features

• Highly secure, Internet-based communications tool
• Available to all drinking water and wastewater
  utilities
• Ready access to water security information
• Timely advisories and alerts of regional and
  national interest

13
ISAC Key Questions

• What functionality should the ISAC include?
• What type of info should be included?
• What are the critical sources of info?
• What analyses and interpretation should be done?
• How to communicate between ISAC members?

14
Possible ISAC Models

• Implementation from scratch
• Contract with a secure service provider that
  hosts these types of portals
• Contract with secure service provider that hosts
  portal and provides analysis
• Develop a government to business partnership

15
ISAC Key Decisions

• ISAC model and implementation plan
• Establishment of governance structure
• Membership requirements, fees and verification
  process
• Development of Business Plan
• Marketing and Promotion

16
Water ISAC Status

• EPA helping to fund ISAC development
• AMWA managing implementation project
• Support and input provided by water and
  wastewater utilities, EPA, States, CDC and
  Sandia National Laboratories
• Next step Implementation of design

17
Water ISAC Information

• Visit www.amwa.net/ISAC
• E-mail WaterISAC_at_amwa.net
• Call 202-331-2820